Privacy Policy
Last updated: May 2026
Welcome to GGMP — Global Gem Marketplace ("we", "our", or "us"). This Privacy Policy explains how we collect, use, and protect your personal information when you use our website and mobile application (collectively, the "Service").
By using GGMP, you agree to the collection and use of information in accordance with this policy.
1. Information We Collect
Information you provide to us
- Full name
- Email address
- Phone number (optional)
- Password (stored in encrypted form)
- Gemstone listing details including title, description, price, photos and videos
- WhatsApp contact number (used only to generate contact links — never displayed publicly)
Information collected automatically
- IP address (used for rate limiting and security)
- Device type and browser information
- Pages visited and time spent on the platform
- WhatsApp button click counts per listing (anonymous)
2. How We Use Your Information
- To create and manage your account
- To verify your email address via OTP
- To display your gemstone listings to potential buyers
- To generate WhatsApp contact links for buyers to reach you
- To send transactional emails (OTP verification, listing status updates)
- To review and approve listings before they go live
- To protect the platform from spam and abuse via rate limiting
- To improve our services based on usage patterns
3. How We Share Your Information
We do not sell, trade, or rent your personal information to third parties. We only share your information in the following limited circumstances:
- Service providers — We use trusted third-party services including Cloudinary (image/video storage), Resend (email delivery), Neon (database hosting) and Vercel (app hosting). These providers process data only as needed to deliver our service.
- Legal requirements — We may disclose information if required by law or to protect the rights and safety of our users.
- Business transfers — In the event of a merger or acquisition, your information may be transferred as part of that transaction.
4. WhatsApp Contact Numbers
When you post a listing, you provide a WhatsApp number for buyers to contact you. This number is never displayed publicly on our platform. Instead, we generate a secure redirect link that opens WhatsApp with a pre-filled message. Your number is stored securely in our database and is only used to create this contact link.
5. Data Security
- All passwords are hashed using bcrypt with 12 salt rounds — never stored in plain text
- All data is transmitted over HTTPS (TLS encryption)
- Authentication uses JWT tokens with expiry
- Rate limiting is applied to all sensitive endpoints to prevent abuse
- Database access is restricted and credentials are never exposed
While we take reasonable measures to protect your data, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security.
6. Data Retention
We retain your personal information for as long as your account is active or as needed to provide the Service. You may request deletion of your account and associated data at any time by contacting us. OTP verification codes are automatically invalidated after 10 minutes.
7. Your Rights
You have the right to:
- Access the personal information we hold about you
- Correct inaccurate or incomplete information via your Account page
- Request deletion of your account and personal data
- Withdraw consent at any time by deleting your account
- Lodge a complaint with a data protection authority in your jurisdiction
8. Cookies
GGMP uses minimal browser storage. We store your authentication token in localStorage to keep you logged in between sessions. We do not use advertising cookies or track you across other websites.
9. Children's Privacy
GGMP is intended for users aged 18 and older. We do not knowingly collect personal information from children under 18. If we become aware that a child has provided us with personal information, we will delete it immediately.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes by updating the "Last updated" date at the top of this page. Continued use of the Service after changes constitutes your acceptance of the updated policy.
11. Contact Us
If you have any questions about this Privacy Policy or how we handle your data, please contact us at: